CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8a70047174c7c0dac58f9732c03c3a79_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8a70047174c7c0dac58f9732c03c3a79_JaffaCakes118
Size
94KB
MD5
8a70047174c7c0dac58f9732c03c3a79
SHA1
ae30a97a66e3eca2fe05cf58c39892e2ef3c3a19
SHA256
1f482fb8dd1e0a1216daa470ad765b4cf9cc047b22ad32ee5d36d08a071bfb70
SHA512
4093031d2d53a2a2c62560ef31cef6a486e1198e06ddee8ca25b8c65862eda925f088a92a45189ec61f2d1f71dc2a9aa7e09737d7118dadb8bdf7e2d53d1880f
SSDEEP
1536:MxvNbz0ZBTYCsCJht3n6bK9HnsEO8Ay+2cgfbwpB7oJG9:OB0BTYCsWecsEOsbcYaBB9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a70047174c7c0dac58f9732c03c3a79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE